From using spider capabilities to manual permission review and inspecting results. Here's How to Test Permissions Policy Header Configuration with ZAP from Jit.
